mirror of
https://github.com/pivpn/pivpn.git
synced 2024-10-18 13:43:32 +00:00
2a78fce9d3
scripts/wireguard/disableCONF.sh
* Mapfile instead of double quoted LIST=("$(...)")
scripts/wireguard/enableCONF.sh
* SC1090: ShellCheck can't follow non-constant source. Use a directive to specify location.
* Disabled warning
* SC2207: Prefer mapfile or read -a to split command output (or quote to avoid splitting).
* Changed to mapfile
* SC2086: Double quote to prevent globbing and word splitting.
* Added double quotes
121 lines
3 KiB
Bash
Executable file
121 lines
3 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
setupVars="/etc/pivpn/wireguard/setupVars.conf"
|
|
|
|
if [ ! -f "${setupVars}" ]; then
|
|
echo "::: Missing setup vars file!"
|
|
exit 1
|
|
fi
|
|
|
|
# shellcheck disable=SC1090
|
|
source "${setupVars}"
|
|
|
|
helpFunc(){
|
|
echo "::: Disable client conf profiles"
|
|
echo ":::"
|
|
echo "::: Usage: pivpn <-off|off> [-h|--help] [-v] [<client-1> ... [<client-2>] ...] "
|
|
echo ":::"
|
|
echo "::: Commands:"
|
|
echo "::: [none] Interactive mode"
|
|
echo "::: <client> Client"
|
|
echo "::: -y,--yes Disable client(s) without confirmation"
|
|
echo "::: -v Show disabled clients only"
|
|
echo "::: -h,--help Show this help dialog"
|
|
}
|
|
|
|
# Parse input arguments
|
|
while test $# -gt 0
|
|
do
|
|
_key="$1"
|
|
case "$_key" in
|
|
-h|--help)
|
|
helpFunc
|
|
exit 0
|
|
;;
|
|
-y|--yes)
|
|
CONFIRM=true
|
|
;;
|
|
-v)
|
|
DISPLAY_DISABLED=true
|
|
;;
|
|
*)
|
|
CLIENTS_TO_CHANGE+=("$1")
|
|
;;
|
|
esac
|
|
shift
|
|
done
|
|
|
|
cd /etc/wireguard || exit
|
|
if [ ! -s configs/clients.txt ]; then
|
|
echo "::: There are no clients to change"
|
|
exit 1
|
|
fi
|
|
|
|
|
|
if [ "$DISPLAY_DISABLED" ]; then
|
|
grep '\[disabled\] ### begin' wg0.conf | sed 's/#//g; s/begin//'
|
|
exit 1
|
|
fi
|
|
|
|
|
|
mapfile -t LIST < <(awk '{print $1}' configs/clients.txt)
|
|
if [ "${#CLIENTS_TO_CHANGE[@]}" -eq 0 ]; then
|
|
echo -e "::\e[4m Client list \e[0m::"
|
|
len=${#LIST[@]}
|
|
COUNTER=1
|
|
while [ $COUNTER -le "${len}" ]; do
|
|
printf "%0${#len}s) %s\r\n" "${COUNTER}" "${LIST[(($COUNTER-1))]}"
|
|
((COUNTER++))
|
|
done
|
|
|
|
read -r -p "Please enter the Index/Name of the Client to be removed from the list above: " CLIENTS_TO_CHANGE
|
|
|
|
if [ -z "${CLIENTS_TO_CHANGE}" ]; then
|
|
echo "::: You can not leave this blank!"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
CHANGED_COUNT=0
|
|
|
|
for CLIENT_NAME in "${CLIENTS_TO_CHANGE[@]}"; do
|
|
|
|
re='^[0-9]+$'
|
|
if [[ ${CLIENT_NAME} =~ $re ]] ; then
|
|
CLIENT_NAME=${LIST[$((CLIENT_NAME -1))]}
|
|
fi
|
|
|
|
if ! grep -q "^${CLIENT_NAME} " configs/clients.txt; then
|
|
echo -e "::: \e[1m${CLIENT_NAME}\e[0m does not exist"
|
|
elif grep -q "#\[disabled\] ### begin ${CLIENT_NAME}" wg0.conf; then
|
|
echo -e "::: \e[1m${CLIENT_NAME}\e[0m is already disabled"
|
|
else
|
|
if [ -n "$CONFIRM" ]; then
|
|
REPLY="y"
|
|
else
|
|
read -r -p "Confirm you want to disable $CLIENT_NAME? [Y/n] "
|
|
fi
|
|
|
|
if [[ $REPLY =~ ^[Yy]$ ]]; then
|
|
|
|
# Disable the peer section from the server config
|
|
echo "${CLIENT_NAME}"
|
|
sed -e "/### begin ${CLIENT_NAME}/,/end ${CLIENT_NAME}/ s/^/#\[disabled\] /" -i wg0.conf
|
|
echo "::: Updated server config"
|
|
|
|
((CHANGED_COUNT++))
|
|
echo "::: Successfully disabled ${CLIENT_NAME}"
|
|
|
|
fi
|
|
fi
|
|
|
|
done
|
|
|
|
# Restart WireGuard only if some clients were actually deleted
|
|
if [ "${CHANGED_COUNT}" -gt 0 ]; then
|
|
if systemctl reload wg-quick@wg0; then
|
|
echo "::: WireGuard reloaded"
|
|
else
|
|
echo "::: Failed to reload WireGuard"
|
|
fi
|
|
fi
|